shell bypass 403

GrazzMean Shell

: /var/www/vhosts/m-auto.co/httpdocs/admin/ [ drwxr-xr-x ]
Uname: Linux serv.m-auto.co 3.10.0-1160.42.2.el7.x86_64 #1 SMP Tue Sep 7 14:49:57 UTC 2021 x86_64
Software: nginx/1.28.2
PHP version: 8.1.34 [ PHP INFO ] PHP os: Linux
Server Ip: 41.215.243.19
Your Ip: 216.73.216.151
User: m-auto.co_vxasg6smqe (10000) | Group: psacln (1003)
Safe Mode: OFF
Disable Function:
opcache_get_status,mail

name : theme_form.php
<?php
include 'includes/header.php';

if (!has_permission('themes_view')) { // Assuming 'themes_view' is the permission to manage themes
    echo "<div class='alert alert-danger'>ليس لديك الصلاحية لعرض هذه الصفحة.</div>";
    include 'includes/footer.php';
    exit;
}

$theme = ['id' => '', 'name' => '', 'css_file' => ''];
if (isset($_GET['id'])) {
    $stmt = $conn->prepare("SELECT * FROM `themes` WHERE `id` = ?");
    $stmt->bind_param('i', $_GET['id']);
    $stmt->execute();
    $result = $stmt->get_result();
    $theme = $result->fetch_assoc();
}
?>

<div class="container-fluid">
    <h1 class="mt-4"><?php echo isset($theme['id']) && $theme['id'] ? 'تعديل' : 'إضافة'; ?> ثيم</h1>

    <form action="theme_process.php" method="post">
        <input type="hidden" name="id" value="<?php echo $theme['id']; ?>">
        <div class="mb-3">
            <label for="name" class="form-label">اسم الثيم</label>
            <input type="text" class="form-control" id="name" name="name" value="<?php echo htmlspecialchars($theme['name']); ?>" required>
        </div>
        <div class="mb-3">
            <label for="css_file" class="form-label">ملف الـ CSS</label>
            <input type="text" class="form-control" id="css_file" name="css_file" value="<?php echo htmlspecialchars($theme['css_file']); ?>" required>
        </div>
        <button type="submit" class="btn btn-primary">حفظ</button>
    </form>
</div>

<?php include 'includes/footer.php'; ?>
© 2026 GrazzMean